$ rpki-client -vvf rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft File: ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft (raw, json) Hash identifier: rEnxA8G/21O9fpjnl0K0QurMmUcLc93L4v6b0ph1lug= Subject key identifier: 44:41:7B:A0:0E:AB:A2:E7:B6:8C:C4:3A:1D:73:EB:9D:4E:99:85:41 Authority key identifier: 4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44 Certificate issuer: /CN=A9162FF2/serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544 Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft Manifest number: 0200 Signing time: Tue 01 Jul 2025 02:44:05 +0000 Manifest this update: Tue 01 Jul 2025 02:44:05 +0000 Manifest next update: Tue 08 Jul 2025 02:44:05 +0000 Files and hashes: 1: ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl (hash: 7GKaqC148eGvH8wmBScksvMfLesPqQKmRD/Whglnn1Q=) 2: 1A302138448311EDB0572C4CC4F9AE02.roa (hash: 91vo57eXpy+XLfc+60pdKiOcpCWF0pprhkB0No7XRi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162FF2, serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544 Validity Not Before: Jul 1 02:44:05 2025 GMT Not After : Jul 8 02:44:05 2025 GMT Subject: CN=68634b75-966d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:03:94:6f:5a:ba:c5:67:ce:08:03:75:79:60: 7b:1c:bd:d8:0d:c4:35:a4:a9:3e:c7:d4:ab:eb:d3: 04:1f:e2:19:61:d3:cd:09:33:5e:0e:5f:1f:2d:22: 6f:75:a4:f1:75:35:d8:0d:54:c7:2b:a0:1a:e9:cb: eb:97:eb:db:94:05:db:24:d7:1e:f8:8c:5a:36:91: 43:81:32:a0:95:fe:6f:c0:47:b6:4c:ec:29:67:d9: 01:cf:98:cc:4d:ac:e6:ad:25:3f:de:19:e5:36:3a: 54:79:76:3a:34:5c:0e:6c:d0:73:c6:cb:46:44:f6: e2:0d:a0:96:28:02:c3:e0:9d:8d:f3:98:b2:99:e6: df:d1:ec:58:2e:10:ab:a2:ed:3b:15:aa:6d:df:59: 8c:b3:d9:ba:f2:a4:3e:1a:c0:ca:a3:01:9c:78:cf: 9c:be:68:ae:a8:89:38:44:ec:a6:99:f6:f4:95:61: ab:21:d6:a0:03:35:4b:a8:8a:24:ed:83:c0:12:a3: 5e:7f:bb:c4:8f:8d:2f:77:17:2f:d8:40:4b:b6:04: a6:72:a2:ec:cc:33:53:a4:a4:8a:7b:e5:56:61:7d: 40:2a:05:22:ee:47:f8:31:ab:2a:ec:44:7e:2f:61: 9b:0d:0d:0b:3d:f0:31:64:b4:01:cd:42:bc:8c:33: 50:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:41:7B:A0:0E:AB:A2:E7:B6:8C:C4:3A:1D:73:EB:9D:4E:99:85:41 X509v3 Authority Key Identifier: keyid:4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:a6:c4:0b:b9:92:9f:6d:cf:b3:ee:89:b9:02:bd:48:91:bf: a8:84:94:a0:56:41:99:77:a1:95:e4:39:e5:77:f1:fc:5a:07: 7d:51:c6:f7:d1:04:1f:db:e8:9d:31:00:38:6e:5b:66:23:cc: 42:67:5a:79:36:63:2c:5c:3e:39:b4:72:eb:10:eb:ab:7e:5d: 0d:b7:3b:98:ab:f3:f1:9a:71:51:08:d7:46:59:8e:82:5b:90: 2e:65:05:53:5c:c6:16:a4:25:a6:7f:9a:6d:c9:1e:49:43:fa: 1f:be:8a:3b:8c:71:43:c7:b1:ba:99:89:1a:12:a4:a4:32:cf: 24:33:c9:25:61:ab:62:db:d0:dd:01:14:e6:3d:cd:67:52:09: c5:a1:d4:3a:fc:7f:02:a8:d6:35:e8:90:67:bb:db:5c:3c:4d: 33:9c:67:6a:4f:27:59:75:4b:de:8f:f5:00:76:a3:9b:37:45: 70:e9:b3:8f:e7:03:ed:fe:99:fb:c9:be:f1:22:b4:16:4a:84: f5:f2:1f:80:ba:e1:6f:c5:79:c5:37:78:7a:89:54:06:e7:48: 13:e0:e9:f3:b1:fc:80:9c:ce:0a:b4:35:f4:a4:ed:13:f1:b4: c2:b2:19:12:35:60:58:fc:91:35:3a:a7:3b:80:31:26:81:85: d7:a7:c9:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJGRjIxMTAvBgNVBAUTKDRFODNEQjgxRUFFNTYwMjQ3NTc4M0MxMUJDRTlEMzU1 MENEM0Q1NDQwHhcNMjUwNzAxMDI0NDA1WhcNMjUwNzA4MDI0NDA1WjAYMRYwFAYD VQQDEw02ODYzNGI3NS05NjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2QOUb1q6xWfOCAN1eWB7HL3YDcQ1pKk+x9Sr69MEH+IZYdPNCTNeDl8fLSJv daTxdTXYDVTHK6Aa6cvrl+vblAXbJNce+IxaNpFDgTKglf5vwEe2TOwpZ9kBz5jM TazmrSU/3hnlNjpUeXY6NFwObNBzxstGRPbiDaCWKALD4J2N85iymebf0exYLhCr ou07Fapt31mMs9m68qQ+GsDKowGceM+cvmiuqIk4ROymmfb0lWGrIdagAzVLqIok 7YPAEqNef7vEj40vdxcv2EBLtgSmcqLszDNTpKSKe+VWYX1AKgUi7kf4Masq7ER+ L2GbDQ0LPfAxZLQBzUK8jDNQ+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFERBe6AO q6LntozEOh1z651OmYVBMB8GA1UdIwQYMBaAFE6D24Hq5WAkdXg8Ebzp01UM09VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkZGMi8zMjEwRDZDNjQ0 N0UxMUVEOTQ4RDQ0MkZDNEY5QUUwMi9Ub1BiZ2VybFlDUjFlRHdSdk9uVFZRelQx VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RvUGJnZXJsWUNSMWVEd1J2T25UVlF6VDFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkZGMi8zMjEwRDZDNjQ0N0UxMUVEOTQ4RDQ0MkZDNEY5QUUwMi9Ub1BiZ2VybFlD UjFlRHdSdk9uVFZRelQxVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLpsQLuZKfbc+z7om5Ar1Ikb+ohJSgVkGZd6GV5Dnld/H8Wgd9Ucb3 0QQf2+idMQA4bltmI8xCZ1p5NmMsXD45tHLrEOurfl0NtzuYq/PxmnFRCNdGWY6C W5AuZQVTXMYWpCWmf5ptyR5JQ/ofvoo7jHFDx7G6mYkaEqSkMs8kM8klYati29Dd ARTmPc1nUgnFodQ6/H8CqNY16JBnu9tcPE0znGdqTydZdUvej/UAdqObN0Vw6bOP 5wPt/pn7yb7xIrQWSoT18h+AuuFvxXnFN3h6iVQG50gT4OnzsfyAnM4KtDX0pO0T 8bTCshkSNWBY/JE1Oqc7gDEmgYXXp8kf -----END CERTIFICATE-----Generated at Wed Jul 2 16:29:50 2025 by rpki-client